What happened
The jpeg_turbo decoder in smg's llm-multimodal component performs uncontrolled memory allocation on attacker-controlled image input, enabling a denial-of-service via a crafted JPEG. CVSS 5.3, published 2026-10-26.
Why it matters
A multimodal LLM preprocessing library that decodes untrusted images without a memory bound lets a single image exhaust the host, killing the inference/preprocessing process.
Attack vector
A remote caller supplies a crafted JPEG to the multimodal decoder; jpeg_turbo::decode_jpeg_rgb allocates memory based on attacker-controlled dimensions without a bound, causing uncontrolled memory allocation / DoS.
Affected systems
smg-project smg 1.7.0 / 1.8.0 / 1.9.0 / 1.10.0 / 1.10.1 (crates/multimodal/src/jpeg_turbo.rs, jpeg_turbo::decode_jpeg_rgb).
Mitigation
Upgrade to a patched smg release; add a dimension/size cap before decoding untrusted images.